In this article

SSL root certificates for Windows Phone OS 7.1

05/20/2016

12 minutes to read

In this article

[ This article is for Windows Phone 8 developers. If you’re developing for Windows 10, see the latest documentation. ]

The following tables list all certificate authorities (CAs) and their root certificates that are pre-installed on a Windows Phone. Each table heading includes a CA name and a current country or region. This is the main country or region from which the CA operates. The CA name is the current operator of the root certificate, which includes a root name, a unique thumbprint, and a root expiration date. These tables are a snapshot of ownership, as the ownership of a CA root certificate can change over time.

Important Note:

The root certificates discussed here apply only to Windows Phone OS 7.1. In Windows Phone 8, the list of root certificates is identical to and automatically synced with the root certificates supported by Windows 8. For the full list of supported Windows Phone 8 root certificates, see Windows and Windows Phone 8 SSL Root Certificates.

The information provided about root certificates is reproduced to the best of Microsoft’s knowledge; its accuracy is not warranted or guaranteed in any way. To confirm actual root certificate details, go to a CA's website.

Note

The Windows Phone and CE Root Certificate Program is not the same as the Windows Root Certificate Program. For more info about how to apply to the Windows Phone and CE Root Certificate Program, send an email to medroot@microsoft.com.

Definitions

Term

Definition

CA Root Name

The common name applied to the root certificate, which might or might not also indicate the name of the CA.

CA Root Size

The modulus of the Rivest, Shamir, and Adleman (RSA) algorithm (typically 2048-bit or 4096-bit RSA). You might see references to other algorithms such as Elliptic Curve Cryptography (ECC) or Elliptic Curve Digital Signature Algorithm (ECDSA).

Signature Hash

The hash algorithm chosen by the CA for this root certificate – Message Digest Algorithm 2 (MD2), Message Digest Algorithm 5 (MD5), Secure Hash Algorithm 1 (SHA1), or SHA2 (SHA256). The hash algorithm used to issue end-use certificates might not be the same as the hash algorithm used for the root certificate.

CA Root Expires

The expiration date of the root certificate, after which the CA cannot issue any more end-use certificates from it. Root certificates are typically kept in distribution after expiration by the Windows Phone and CE Root Certificate Program until the last of these end-use certificates expire.

Thumbprint

The hash value which uniquely identifies the root certificate in question. It can be confirmed in the actual root certificate by examining the certificate properties under the Thumbprint field.

Back to Top

AOL (United States)

The following table lists the pre-installed SSL root certificates from AOL.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

America Online Root Certification Authority 2

4096

SHA1

9/27/2037

85 b5 ff 67 9b 0c 79 96 1f c8 6e 44 22 00 46 13 db 17 92 84

America Online Root Certification Authority 1

2048

SHA1

11/19/2037

39 21 c1 15 c1 5d 0e ca 5c cb 5b c4 f0 7d 21 d8 05 0b 56 6a

Back to Top

Comodo (United States)

The following table lists the pre-installed SSL root certificates from Comodo.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

COMODO RSA Certification Authority

4096

SHA1

11/18/2038

af e5 d2 44 a8 d1 19 42 30 ff 47 9f e2 f8 97 bb cd 7a 8c b4

USERTrust RSA Certification Authority

4096

SHA1

11/18/2038

2b 8f 1b 57 33 0d bb a2 d0 7a 6c 51 f7 0e e9 0d da b9 ad 8e

COMODO ECC Certification Authority

ECDSA384

SHA1

12/31/2028

9f 74 4e 9f 2b 4d ba ec 0f 31 2c 50 b6 56 3b 8e 2d 93 c3 11

USERTrust ECC Certification Authority

ECC secp384r1 (NIST P-384)

SHA1

1/18/2038

d1 cb ca 5d b2 d5 2a 7f 69 3b 67 4d e5 f0 5a 1d 0c 95 7d f0

UTN-USERFirst-Hardware

2048

SHA1

7/9/2019

04 83 ed 33 99 ac 36 08 05 87 22 ed bc 5e 46 00 e3 be f9 d7

UTN - DATACorp SGC

2048

SHA1

6/24/2019

58 11 9f 0e 12 82 87 ea 50 fd d9 87 45 6f 4f 78 dc fa d6 d4

AddTrust External CA Root

2048

SHA1

5/30/2020

02 fa f3 e2 91 43 54 68 60 78 57 69 4d f5 e4 5b 68 85 18 68

Back to Top

DigiCert (United States)

The following table lists the pre-installed SSL root certificates from DigiCert.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

DigiCert Assured ID Root CA

2048

SHA1

11/9/2031

05 63 b8 63 0d 62 d7 5a bb c8 ab 1e 4b df b5 a8 99 b2 4d 43

DigiCert High Assurance EV Root CA

2048

SHA1

11/9/2031

5f b7 ee 06 33 e2 59 db ad 0c 4c 9a e6 d3 8f 1a 61 c7 dc 25

DigiCert Global Root CA

4096

SHA1

11/9/2031

a8 98 5d 3a 65 e5 e5 c4 b2 d7 d6 6d 40 c6 dd 2f b1 9c 54 36

Back to Top

Entrust (Canada)

The following table lists the pre-installed SSL root certificates from Entrust.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

Entrust.net Certification Authority (2048)

2048

SHA1

12/24/2019

80 1d 62 d0 7b 44 9d 5c 5c 03 5c 98 ea 61 fa 44 3c 2a 58 fe

Back to Top

GlobalSign (United Kingdom)

The following table lists the pre-installed SSL root certificates from GlobalSign.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

GlobalSign Root CA - R1

2048

SHA1

1/28/2028

b1 bc 96 8b d4 f4 9d 62 2a a8 9a 81 f2 15 01 52 a4 1d 82 9c

GlobalSign Root CA - R2

2048

SHA1

12/15/2021

75 e0 ab b6 13 85 12 27 1c 04 f8 5f dd de 38 e4 b7 24 2e fe

GlobalSign Root CA – R3

2048

SHA1

3/18/2029

d6 9b 56 11 48 f0 1c 77 c5 45 78 c1 09 26 df 5b 85 69 76 ad

GlobalSign Root CA

2048

SHA1

1/28/2014

2f 17 3f 7d e9 96 67 af a5 7a f8 0a a2 d1 b1 2f ac 83 03 38

Back to Top

GoDaddy (United States)

The following table lists the pre-installed SSL root certificates from GoDaddy.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

Go Daddy Class 2 Certification Authority

2048

SHA1

6/29/2034

27 96 ba e6 3f 18 01 e2 77 26 1b a0 d7 77 70 02 8f 20 ee e4

ValiCert Class 2 Policy Validation Authority

1024

SHA1

6/25/2019

31 7a 2a d0 7f 2b 33 5e f5 a1 c3 4e 4b 57 e8 b7 d8 f1 fc a6

Starfield Class 2 Certification Authority

2048

SHA1

6/29/2034

ad 7e 1c 28 b0 64 ef 8f 60 03 40 20 14 c3 d0 e3 37 0e b5 8a

Back to Top

Keynectis (France)

The following table lists the pre-installed SSL root certificates from Keynectis.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

KEYNECTIS ROOT CA

2048

SHA1

5/26/2020

9c 61 5c 4d 4d 85 10 3a 53 26 c2 4d ba ea e4 a2 d2 d5 cc 97

Class 2 Primary CA

2048

SHA1

7/7/2019

74 20 74 41 72 9c dd 92 ec 79 31 d8 23 10 8d c2 81 92 e2 bb

Back to Top

QuoVadis (Bermuda)

The following table lists the pre-installed SSL root certificates from QuoVadis.

CA Root Name

CA Root Size

Signature Hash

CA Root Expires

Thumbprint

QuoVadis Root Certification Authority

2048

SHA1

3/17/2021

de 3f 40 bd 50 93 d3 9b 6c 60 f6 da bc 07 62 01 00 89 76 c9

QuoVadis Root CA 2

4096

SHA1

11/24/2031

1f 49 14 f7 d8 74 95 1d dd ae 02 c0 be fd 3a 2d 82 75 51 85

QuoVadis Root CA 3

4096

SHA1

11/24/2031

1f 49 14 f7 d8 74 95 1d dd ae 02 c0 be fd 3a 2d 82 75 51 85

Back to Top

RSA Security (United States)

The following table lists the pre-installed SSL root certificates from RSA Security.